PYSEC-2023-60
At a glance
- Published
- Updated
- CVE
- CVE-2023-29247
- Aliases
- BIT-airflow-2023-29247, GHSA-vcf6-3wv2-5vcr
Description
Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0.
Affected packages
| Package | Versions |
|---|---|
| PyPI · apache-airflow | introduced 0, fixed 2.6.0 |
References
- https://github.com/apache/airflow/pull/30779 WEB
- https://github.com/apache/airflow/pull/30447 WEB
- https://lists.apache.org/thread/kqf5lxmko133780clsp827xfsh4xd3fl WEB
- https://github.com/advisories/GHSA-vcf6-3wv2-5vcr ADVISORY
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — PyPA Advisory Database |